← Back to the AI Dependency AtlasExact package identity dossier

LangGraph

pypi:langgraph
pypi

This dossier links the stable identity pypi:langgraph to 6 exact observed versions across 6 public repositories.

pypipypi:langgraphecosystem:name + exact version + evidence path

A package identity or provider interface in published code does not prove configuration, an account, procurement, data transfer or an API call.

ecosystem:name + exact version + evidence path
6repositories
8exact evidence rows
6exact versions
1reported license expression
2OSV records returned
Exact published evidence

Observed exact versions and registry metadata

Publication age and licenses come from deps.dev metadata. They are context—not a maintenance, legal or portability verdict.

Exact version0.1.122 Jun 2024
Repositories
1
Occurrences
1
Reported licenses
MIT
no verified publish attestation reported2 OSV records
Open exact source ↗
Exact version0.3.2127 Mar 2025
Repositories
1
Occurrences
1
Reported licenses
MIT
no verified publish attestation reported1 OSV record
Open exact source ↗
Exact version1.0.612 Jan 2026
Repositories
1
Occurrences
1
Reported licenses
MIT
no verified publish attestation reported1 OSV record
Open exact source ↗
Exact version1.2.402 Jun 2026
Repositories
1
Occurrences
1
Reported licenses
MIT
no verified publish attestation reportedNo OSV record returned for this exact version
Open exact source ↗
Exact version1.2.512 Jun 2026
Repositories
1
Occurrences
1
Reported licenses
MIT
no verified publish attestation reportedNo OSV record returned for this exact version
Open exact source ↗
Exact version1.2.730 Jun 2026
Repositories
2
Occurrences
3
Reported licenses
MIT
no verified publish attestation reportedNo OSV record returned for this exact version
Open exact source ↗
Observed relations

Repositories carrying this identity

Chatf13/microservices/chat
1.2.4 · 1.2.72 Occurrences
Chatoc000155135727/chat
1.2.72 Occurrences
LLM_Workshopbbsr_ida_public/llm_workshop
0.3.211 Occurrence
ai-websearch-benchmarkdatenlabor-bmz/ai-websearch-benchmark
1.0.61 Occurrence
ai-legal-graphiorb/ai-legal-graph
0.1.11 Occurrence
MUCGPTlandeshauptstadt-muenchen/mucgpt
1.2.51 Occurrence
Exact published evidence

exact evidence rows

ai-legal-graphiorb/ai-legal-graph
pypi:langgraph@0.1.1requirements.txt
direct declarationnot marked as development-only
Open exact source ↗
ai-websearch-benchmarkdatenlabor-bmz/ai-websearch-benchmark
pypi:langgraph@1.0.6uv.lock
declaration relationship not reporteddevelopment scope not reported
Open exact source ↗
Chatf13/microservices/chat
pypi:langgraph@1.2.4requirements-dev.txt
generated or transitive declarationnot marked as development-only
Open exact source ↗
Chatoc000155135727/chat
pypi:langgraph@1.2.7requirements-dev.txt
generated or transitive declarationnot marked as development-only
Open exact source ↗
Chatoc000155135727/chat
pypi:langgraph@1.2.7requirements.txt
generated or transitive declarationnot marked as development-only
Open exact source ↗
Chatf13/microservices/chat
pypi:langgraph@1.2.7requirements.txt
generated or transitive declarationnot marked as development-only
Open exact source ↗
LLM_Workshopbbsr_ida_public/llm_workshop
pypi:langgraph@0.3.21docker/requirements.txt
direct declarationnot marked as development-only
Open exact source ↗
MUCGPTlandeshauptstadt-muenchen/mucgpt
pypi:langgraph@1.2.5mucgpt-core-service/uv.lock
declaration relationship not reporteddevelopment scope not reported
Open exact source ↗
OSV

Related OSV records

GHSA-g48c-2wqr-h844

LangGraph checkpoint loading has unsafe msgpack deserialization

3 repositories06 Jun 2026
GHSA-w39p-vh2g-g8g5

LangGraph SDK has unsafe URL path construction

2 repositories13 Jul 2026
Interpretation boundary

Exact identities in, explicit limits out

Only exact npm and PyPI tuples are enriched. Reported SPDX expressions are metadata; no compatibility, obligation or legal conclusion is inferred.

Retrieval, parsing, matching and publishing use no generative AI model.

i6eal (2026): LangGraph — exact AI dependency evidence dossier, data state 19 Jul 2026. https://i6eal.de/en/tools/ki-abhaengigkeitsatlas/paket/langgraph-6c1c645e/

Reading this dossier

Does package presence prove that a provider is used?
No. Even a direct interface declaration does not establish configuration, credentials, procurement, data transfer or an API call.
Why are exact versions required?
OSV and registry metadata can be linked reproducibly only to an observed package@version tuple. The collector never substitutes a newest release for a range.
Does a missing row mean the dependency is absent?
No. It means not observed within the bounded files and repository checkpoint. Incomplete trees and parser failures remain explicit.

Need a permanent dependency evidence trail for another public code cohort?

We build source-backed data products with stable identities, reproducible joins and boundaries that remain visible.

Discuss a data projectExplore all tools